Overview
overview
7Static
static
6天柱1.apk
android-9-x86
71.apk
android-9-x86
11.apk
android-10-x64
11.apk
android-11-x64
1Alipay_msp_online.apk
android-9-x86
1Alipay_msp_online.apk
android-11-x64
1com.skymob...03.apk
android-9-x86
1com.skymob...03.apk
android-10-x64
1com.skymob...03.apk
android-11-x64
1skymobi_pa...01.apk
android-9-x86
1skymobi_pa...01.apk
android-10-x64
1skymobi_pa...01.apk
android-11-x64
1天柱10.apk
android-9-x86
71.apk
android-9-x86
11.apk
android-10-x64
11.apk
android-11-x64
1Alipay_msp_online.apk
android-9-x86
1Alipay_msp_online.apk
android-11-x64
1com.skymob...03.apk
android-9-x86
1com.skymob...03.apk
android-10-x64
1com.skymob...03.apk
android-11-x64
1skymobi_pa...01.apk
android-9-x86
1skymobi_pa...01.apk
android-10-x64
1skymobi_pa...01.apk
android-11-x64
1天柱11.apk
android-9-x86
71.apk
android-9-x86
11.apk
android-10-x64
11.apk
android-11-x64
1Alipay_msp_online.apk
android-9-x86
1Alipay_msp_online.apk
android-11-x64
1com.skymob...03.apk
android-9-x86
1com.skymob...03.apk
android-10-x64
1Analysis
- max time kernel
1s - max time network
163s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
22/08/2026, 04:32
Static task
static1
Behavioral task
behavioral1
Sample
天柱1.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
1.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral3
Sample
1.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral4
Sample
1.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral5
Sample
Alipay_msp_online.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral6
Sample
Alipay_msp_online.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral7
Sample
com.skymobi.pay.tplugin_V3003.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral8
Sample
com.skymobi.pay.tplugin_V3003.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral9
Sample
com.skymobi.pay.tplugin_V3003.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral10
Sample
skymobi_pay_wxplugin_v1001.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral11
Sample
skymobi_pay_wxplugin_v1001.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral12
Sample
skymobi_pay_wxplugin_v1001.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral13
Sample
天柱10.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral14
Sample
1.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral15
Sample
1.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral16
Sample
1.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral17
Sample
Alipay_msp_online.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral18
Sample
Alipay_msp_online.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral19
Sample
com.skymobi.pay.tplugin_V3003.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral20
Sample
com.skymobi.pay.tplugin_V3003.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral21
Sample
com.skymobi.pay.tplugin_V3003.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral22
Sample
skymobi_pay_wxplugin_v1001.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral23
Sample
skymobi_pay_wxplugin_v1001.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral24
Sample
skymobi_pay_wxplugin_v1001.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral25
Sample
天柱11.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral26
Sample
1.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral27
Sample
1.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral28
Sample
1.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral29
Sample
Alipay_msp_online.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral30
Sample
Alipay_msp_online.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral31
Sample
com.skymobi.pay.tplugin_V3003.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral32
Sample
com.skymobi.pay.tplugin_V3003.apk
Resource
android-x64-20260325-en
General
- Target 天柱1.apk
- Size 9.9MB
- Sample260822-e53mja1ckg
- SHA256 124f0b87fc73c58e2c87e3ff1b913500e5550b0871afdca11215822d4c75a040
- MD5 27dc7aef4f40f43097fb95f986d12293
- SHA1 c882229a29d6a376a863eaff2741227296a39442
- SHA512 05526038d785fddcdd2307f12135df16cd130e1d4d62f530822758b154a894ee47193b12bcdceffb887d138b797637b1886dec5cf77c95501a8ebbce13f2d7cb
- SSDEEP 196608:zF8BFLZ9pYaJHnt4CjowvRaPLa+fuscEpYk1+1pHuye1MbN5TjP+QuYcexDCdXIh:p8BFWaht4C1vwjWsDd+Oy2M/jOY2dXIh
- TLSH T109A61296A77DF827E5B7D43287614242B4288C809302F7672605F1684FF7F849B8DEDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.skymobi.mopowydv1 - Reads the content of SMS inbox messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/inbox com.skymobi.mopowydv1 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.skymobi.mopowydv1 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.skymobi.mopowydv1
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.skymobi.mopowydv1/files/repo/com.skymobi.moposns.plugin.account/19/1.apk
- Size 429KB
- SHA256 c3e3aebc7258cb705e876b2541d2863f68dc3a0adf8e5a72e201e68880376d92
- MD5 774ecc221eceeb37a825ea8b64c24b5c
- SHA1 4b870698bf8af5b862d42387dfb49dcf575a73f2
- SHA512 b22949012c5c59ed4c05623aa9675ce0080c66eb7dde5ba46e76257b4e8c07384c84426bc6bca72c4c8da712dfabb73055e0bca3ac725b6f054b3fbafbd62194
- SSDEEP 12288:0ROmRjP+4P6MGLi5FK/U0ZlkxqVyCTp/HTTiQB:WV9KXfkxOzlzeE
- TLSH T1A794D042860DE933C97BE43AC695462A7118DD01D347EB679651B23C0CF3F986B8EEC9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.tplugin_V3003.apk
- Size 447KB
- SHA256 e449ead95605a15be5c73e522e606dd8b2def15a594f4c0149ba72b4e799239b
- MD5 b9b595cda9a780a7c976af15bf6109cb
- SHA1 08f7d037903b6321e650da8f8fce8a39cc790a6b
- SHA512 6149e1ed0308226709fb86c889b34d56411de1e6941240a6a0589d70ff9574e0ecd91ea587085c182307a796b26b87096828478dca577b701ef1a6780408c961
- SSDEEP 12288:30XrnCtRlZ3kODQYRN808s14MVzuVLstXtQ:6rnCtHyODzuTs14MduGtQ
- TLSH T1FEA4D0627BDC591DF6F7CF3AAE3510895469FCC1A901D75E0010B80D8E7BB809B29BAD
- MD5 SHA1 SHA512 SSDEEP TLSH